Health care management and information systems security: awareness, training or education?

Katsikas, Sokratis K.

doi:10.1016/s1386-5056(00)00112-x

Cited by 54 publications

(28 citation statements)

References 2 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…It means that information systems security should not be considered as a field that can be subjected to some form of informal training [34]. This is because such trainings are directed to broad audiences and the learners are mostly passive recipients [34]. Our finding is conflicting with Bulgurcu, Cavusoglu & Benbasat [33], who supported that there is no significant relationship between education level categories and computer technology usage.…”

Section: Computer Usage and Securitymentioning

confidence: 55%

Impact of education on security practices in ICT

Bostan

2015

Teh. vjesn.

View full text Add to dashboard Cite

Original scientific paperIn assuring the security in information technology, user awareness and acquired-user habits are inevitable components, yet they may be qualified as the feeblest ones. As the information technology tries to put its best in providing maximum security, user awareness plays a key-role. Additionally, although the literature provides studies on approaches for teaching information security, there are not many evidences on the impact of education level. Therefore, this study investigates the impact of the education level on user security awareness in using the Information and Communication Technology (ICT) products. For this purpose, a survey was conducted among 433 citizens from different layers of the society. Interestingly, the results indicated that education level has significant impact on all security issues included in the analysis regarding computer usage, web usage and e-mail usage. Keywords: Education and ICT security awareness, Education and ICT usage, E-mail security, Computer security, Web security Utjecaj obrazovanja na sigurnosne mjere u ICTIzvorni znanstveni članak U provođenju sigurnosnih mjera u informatičkoj tehnologiji, svijest i stečene radne navike korisnika neizbježne su komponente. Ipak, može ih se označiti i kao najslabije. Premda informatička tehnologija nastoji činiti najviše što može da bi osigurala maksimum sigurnosti, svijest korisnika o tome je ključna. Uz to, iako se u literaturi mogu naći radovi koji se bave načinima podučavanja sigurnosti u informatici, nema ih mnogo koji razmatraju utjecaj stupnja obrazovanja. Stoga se u ovom radu ispituje utjecaj stupnja obrazovanja na to koliko su korisnici svjesni potrebe primjene zaštitnih mjera pri korištenju proizvoda informatičke i komunikacijske tehnologije (ICT). U tu je svrhu provedeno ispitivanje na grupi od 433 građana, pripadnika raznih društvenih slojeva. Zanimljivo je da su rezultati pokazali kako nivo obrazovanja značajno utječe na pitanja vezana uz provođenje zaštitnih mjera kad se radi o uporabi računala, internetske mreže i e-pošte.

show abstract

Section: Computer Usage and Securitymentioning

confidence: 55%

Impact of education on security practices in ICT

Bostan

2015

Teh. vjesn.

View full text Add to dashboard Cite

show abstract

“…Fundamental to awareness techniques are unique attention-grabbing methods intended to stimulate employees and get them thinking about information assurance and its associated issues (Maconachy, 1989, Thomson andVon Solms, 1998). Awareness activities for employees are mostly passive, as they are receivers of information through various messaging techniques that normally do not elicit employee interaction (Katsikas, 2000). Department of Defense instructions outline the goal of awareness as "heightening threat appreciation and the importance of adhering to protective measures" (DoD, 1997: A-8).…”

Section: Awarenessmentioning

confidence: 99%

“…Training's main purpose is to "develop skills and abilities to mitigate system vulnerabilities, and implement and maintain protected systems" (DoD, 1997: A-8). As compared to awareness efforts, training sessions usually require more of an employee's time, are more formal in nature, and contain a much more active component (Katsikas, 2000, Maconachy, 1989. The key at the training level is to avoid stale content and presentation techniques (Catenazzo, 2000).…”

Section: Trainingmentioning

confidence: 99%

“…Although standardized procedures should be presented, training should be personalized and adaptable so as to remain relevant and interesting. The appropriate level of training required will vary among offices and employees and depend upon the level of exposure to information and information systems (Katsikas, 2000). This stresses the need for tailorable training programs.…”

Section: Trainingmentioning

confidence: 99%

“…Education aims at creating expertise and specialization within the field of IA and is focused on employees' long-term memory (Katsikas, 2000). Education adds a conceptual and theoretical basis to IA and aids employees in utilizing abstract thought in analyzing issues and situations, perhaps ones they have not encountered or been trained upon.…”

Section: Educationmentioning

confidence: 99%

See 2 more Smart Citations

The effect of interactivity and instructional exposure on learning effectiveness and knowledge retention: A comparative study of two U.S. Air Force Computer-Based Training (CBT) courses for network user licensing

Imperial¹

2003

PsycEXTRA Dataset

View full text Add to dashboard Cite

Employees’ Adherence to Information Security Policies: An Empirical Study

Siponen

Pahnila

Mahmood

2007

IFIP International Federation for Information Processing

View full text Add to dashboard Cite

The key threat to information security is constituted by careless employees who do not comply with information security policies. To ensure that employees comply with organizations' information security procedures, a number of information security policy compliance measures have been proposed in the past. Prior research has criticized these measures as lacking theoretically and empirically grounded principles to ensure that employees comply with information security policies. To fill this gap in research, this paper advances a new model that explains employees' adherence to information security policies. In this model, we extend the Protection Motivation Theory (PMT) by integrating the General Deterrence Theory (GDT) and the Theory of Reasoned Action (TRA) with PMT. To test this model, we collected data (N = 917) from four different companies. The results show that threat appraisal, self-efficacy and response efficacy have a significant impact on intention to comply with information security policies. Sanctions have a significant impact on actual compliance with information security policies. Intention to comply with information security policies also has a significant impact on actual compliance with information security policies.

show abstract

Health care management and information systems security: awareness, training or education?

Cited by 54 publications

References 2 publications

Impact of education on security practices in ICT

Impact of education on security practices in ICT

The effect of interactivity and instructional exposure on learning effectiveness and knowledge retention: A comparative study of two U.S. Air Force Computer-Based Training (CBT) courses for network user licensing

Employees’ Adherence to Information Security Policies: An Empirical Study

Contact Info

Product

Resources

About